AMENDMENTS 

IN THE CLAIMS 

1 . (currently amended) A method for processing network management data 
received by a network management system during the monitoring of a network, the method 
comprising: receiving network management data, and determining in real-time if the network 
management data indicates the resolution of a previous event generated by the network 
management system in response to previously received network management data, automatically 
changing a severity indicator of said previous event dependent on said determining step, and then 
automatically removing said previous event from a memory of the network management system, 
depending on said severity indicator. 

2. (original) A method as claimed in claim 1, wherein, if the network 
management data indicates the resolution of a previous event, the method further comprises 
marking the previous event as resolved. 

3. (original) A method as claimed in claim 1, wherein the network management 
data is processed in response to the network management system receiving network management 
data from the network. 

4. (original) A method as claimed in claim 1, the network management data 
comprising values of a monitored characteristic of a part of the network for which an event is 
generated if the monitored value exceeds a predetermined threshold, wherein an event list 



includes an unresolved previous event for the monitored characteristic, wherein the step of 
receiving network management data comprises receiving a value for the monitored characteristic, 
and the step of determining comprises considering whether the monitored value has been below 
the predetermined threshold for a preceding time period, and if so determining that the received 
value indicates the resolution of the unresolved previous event. 

5. (original) A method as claimed in claim 4, wherein the step of considering 
comprises, in response to receiving the network management data, comparing a first received 
value for the monitored characteristic with the predefined threshold, and if the value is below the 
predefined threshold, starting a timer, the timer expiring at the end a predefined time period. 

6. (original) A method as claimed in claim 5, wherein the step of considering 
further comprises comparing each subsequent received value for the monitored characteristic 
with the predefined threshold, and if any value exceeds the threshold canceling the timer. 

7. (original) A method as claimed in claim 5, wherein, when the timer expires, 
determining that the monitored value has been below the predetermined threshold for the 
preceding time period. 

8. (currently amended) A method for processing data representing a monitored 
characteristic of a part of the network in a network management system, the method comprising: 
periodically receiving a value for the monitored characteristic; if a received value exceeds a 
predetermined threshold for the monitored characteristic generating an event; and thereafter. 



periodically considering whether the monitored value has been below the predetermined 
threshold for a preceding time period, and if so determining in real-time that the event is resolved 
and automatically changing a severity indicator of said event, wherein the severity indicator 
establishes whether the said event should be automatically removed from a memory of the 
network management system. 

9. (original) A method as claimed in claim 8, wherein the preceding time period 
is an immediately preceding predetermined time period, and the step of periodically considering 
comprises considering whether the monitored value has been below the predetermined threshold 
for the immediately preceding time period in response to each subsequently received value. 

10. (original) A method as claimed in claim 8, wherein if the step of considering 
determines that the event is resolved, the method further comprises marking the event as 
resolved. 

11. (original) A method as claimed in claim 1, the network management data 
relating to an asynchronous Trap being received by the network management system, wherein 
the step of determining comprises considering if the Trap indicates the possible resolution of an 
event in an event log. 

12. (original) A method as claimed in claim 1 1 , wherein if the Trap indicates the 
possible resolution of an event in an event log, the step of determining further comprises 
considering whether the event log includes a previously received event that is resolved by the 



Trap. 



13. (currently amended) A method for processing data received in an asynchronous 
Trap by a network management system, the method comprising: receiving a Trap from the 
network; automatically determining if the received Trap is a reportable condition, and if so 
considering if the Trap indicates the possible resolution of a event in an event log, and if so 
further considering in real-time if the Trap indicates the possible resolution of a further event in 
the event log. 

14. (previously amended) A method as claimed in claim 1, wherein the method 
processes network management data previously received by the network management system 
and stored in the memory. 

15. (currently amended) A method as claimed in claim 14, wherein the step of 
receiving network management data comprises receiving event data relating to an event stored in 
the memory, in response to a scan of previously generated events stored and included in an event 
log. 

16. (original) A method as claimed in claim 15, wherein the event data relates to 
a recurring event and includes the time of the last occurrence of the event. 

17. (original) A method as claimed in claim 16, wherein the step of determining 
comprises comparing the present time with the time of the last occurrence of the event, and, if 



the time difference is greater than a predetermined time interval, determining that the event is 
resolved. 

18. (original) A method as claimed in claim 17, wherein if the step of 
determining determines that the event is resolved, the method further comprises marking the 
recurring event as resolved. 

19. (currently amended) A method for processing event data generated by a network 
management system during the monitoring of a network, the method processing event data 
relating to events previously generated by the network management system a plurality of times 
and which may be entered in the event log as a recurring event, the method comprising 
determining in real-time if an event has already been logged a predetermined number of times in 
an event list, and if so automatically identifying the event; and considering whether the condition 
which caused the event to be generated has occurred in a preceding time period. 

20. (original) A method as claimed in claim 19, wherein, if the step of 
considering determines that the condition which caused the event to be generated has not 
occurred in the preceding time period, determining the event to be resolved. 

21. (original) A method as claimed in claim 20, further comprising marking the 
event in the event list as resolved. 

22. (currently amended) A computer readable medium including a computer 



program for processing network management data received by a network management system 
during the monitoring of a network; the program comprising a program step for receiving 
network management data and for determining in real-time if the network management data 
indicates the resolution of a previous event generated by the network management system in 
response to previously received network management data, automatically changing a severity 
indicator of said previous event dependent on said determining step, and then automatically 
removing said previous event from a memory of the network management system, depending on 
said severity indicator. 

23. (currently amended) A network management system for processing network 
management data received during the monitoring of a network, the system comprising: a 
processor for receiving network management data and determining in real-time if the network 
management data indicates the resolution of a previous event generated by the network 
management system in response to previously received network management data, automatically 
changing a severity indicator of said previous event dependent on said determining step, and then 
automatically removing said previous event from a memory of the network management system, 
depending on said severity indicator. 

24. (currently amended) A network management system as claimed in claim 23, 
wherein the memory is configured to store data relating to events generated by the network 
management system, wherein if the processor determines that received network management 
data indicates the resolution of a previous event stored in the memory, the processor updates the 
memory to mark the previous event as resolved. 



25. (previously amended) A network management system as claimed in claim 24, 
further comprising means for presenting an event list of generated events to a user. 




